Thanks, Pondus, for revealing that. When you do not check, such clever cybercriminals will have you big time.
That is why analytics also is in need of a right blink of the human eye.
To me this one was weird from the start, as URLHaus reported and I saw if being flagged.
So one can never really relent on a single source, whether it is a real find or an FP.
polonus